Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 97

Export CSV
CVE-2012-1137

freetype: heap buffer off-by-one in BDF parsing _bdf_list_ensure() (#35643)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed
Vendors
Freetype Mozilla Redhat
Products
Freetype Firefox Mobile Enterprise Linux
CVE-2012-1138

freetype: heap OOB read in the MIRP instruction implementation in TTF BCI (#35646)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the MIRP instruction in a TrueType font.

CVSS 2.0 · 9.3 Critical EPSS 4.7% KEV · Not listed
Vendors
Freetype Mozilla
Products
Freetype Firefox Mobile
CVE-2012-1139

freetype: data buffer underflow in BDF parser _bdf_parse_glyphs() (#35656)

Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed
Vendors
Freetype Mozilla Redhat
Products
Freetype Firefox Mobile Enterprise Linux
CVE-2012-1140

freetype: multiple buffer over-read in PS parser conversion functions (#35657)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed
Vendors
Freetype Mozilla Redhat
Products
Freetype Firefox Mobile Enterprise Linux
CVE-2012-1141

freetype: BDF parser _bdf_list_split() fails to properly initialize field array (#35658)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted ASCII string in a BDF font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed
Vendors
Freetype Mozilla Redhat
Products
Freetype Firefox Mobile Enterprise Linux
CVE-2012-1142

freetype: incorrect computation of number of glyphs in FNT_Face_Init() for FNT/FON files (#35659)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph-outline data in a font.

CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed
Vendors
Freetype Mozilla Redhat
Products
Freetype Firefox Mobile Enterprise Linux
CVE-2012-1143

freetype: integer divide by zero in FT_DivFix() (#35660)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font.

CVSS 2.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Freetype Mozilla Redhat
Products
Freetype Firefox Mobile Enterprise Linux
CVE-2012-1144

freetype: insufficient checking of first outline point in TTF parser (#35689)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font.

CVSS 2.0 · 9.3 Critical EPSS 4.9% KEV · Not listed
Vendors
Freetype Mozilla Redhat
Products
Freetype Firefox Mobile Enterprise Linux
CVE-2012-5669

freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.

CVSS 2.0 · 4.3 Medium EPSS 3.9% KEV · Not listed
Vendors
Freetype Redhat
Products
Freetype Enterprise Linux
CVE-2012-5670

freetype: Out-of-bounds write in _bdf_parse_glyphs() (#37907)

The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value.

CVSS 2.0 · 4.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Freetype
Products
Freetype
CVE-2025-23022

freetype: signed integer overflow in cf2_doFlex

FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Freetype
Products
Freetype
CVE-2018-6942

freetype: NULL pointer dereference in the Ins_GETVARIATION() function

An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Freetype
Products
Ubuntu Linux Freetype
CVE-2015-9382

freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read

FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Debian Freetype Redhat
Products
Debian Linux Freetype Enterprise Linux
CVE-2015-9290

freetype: buffer over-read in function T1_Get_Private_Dict in type1/t1parse.c

In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is no check that the new values of cur and limit are sensible before going to Again.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Freetype
Products
Freetype